Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/k81sGP_nTYcnr-ydvL_qIPOJOvk.roa
File: k81sGP_nTYcnr-ydvL_qIPOJOvk.roa (raw, json)
Hash identifier: 5IYqtPSCzWY5rft+/OTv7pak8S3Yrmu5rpVtbzra1bc=
Subject key identifier: 93:CD:6C:18:FF:E7:4D:87:27:AF:EC:9D:BC:BF:EA:20:F3:89:3A:F9
Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial: 0194236A2B98AE072C9629B7E784D7BBC592
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/k81sGP_nTYcnr-ydvL_qIPOJOvk.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196954
IP address blocks: 130.255.120.0/21 maxlen: 21
185.63.124.0/22 maxlen: 22
2a04:9740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2b:98:ae:07:2c:96:29:b7:e7:84:d7:bb:c5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93cd6c18ffe74d8727afec9dbcbfea20f3893af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a7:32:ff:52:df:24:51:d4:e4:25:c9:60:59:
23:93:a7:ce:70:06:0a:b4:57:33:be:44:97:5f:f3:
ba:af:95:6d:2e:9f:20:51:28:e1:8b:da:ba:2f:b4:
e7:bd:ab:95:21:a3:f3:e8:dc:40:be:b2:b2:1c:25:
ef:83:8e:40:5e:75:83:d6:80:86:1a:91:94:9a:16:
82:d0:d1:e1:88:17:f0:96:e2:cf:7c:df:34:1e:90:
50:94:48:2b:06:cb:9d:92:ff:9d:19:72:ef:7e:c0:
17:53:2d:7f:63:79:74:9b:57:f7:7b:a7:83:3d:7a:
5d:e7:76:24:c6:07:f0:a6:69:61:86:b8:d5:5b:53:
c4:5c:9b:a1:2a:f7:ed:32:3d:b9:b1:a3:1c:4e:5b:
2c:63:6e:ba:aa:b0:6e:f4:07:f7:1e:69:8d:73:24:
55:6c:35:cb:1b:a9:88:7c:fe:dc:6b:d8:76:08:90:
96:0f:28:06:28:e9:aa:09:48:ce:c4:ed:f0:e0:45:
57:87:61:f2:31:2b:9e:14:6f:8d:53:bb:09:c5:a7:
ca:7a:da:af:31:cf:d9:66:f6:b5:c7:40:ed:f5:a9:
8d:2c:e4:fb:16:d7:d8:d2:e6:e6:77:5e:9a:0d:00:
d6:ae:c3:1c:e0:13:5a:a6:bd:f8:11:5c:47:be:61:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CD:6C:18:FF:E7:4D:87:27:AF:EC:9D:BC:BF:EA:20:F3:89:3A:F9
X509v3 Authority Key Identifier:
keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/k81sGP_nTYcnr-ydvL_qIPOJOvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.120.0/21
185.63.124.0/22
IPv6:
2a04:9740::/29
Signature Algorithm: sha256WithRSAEncryption
2f:a1:0c:37:19:69:5a:76:e7:e4:78:12:a4:a5:21:32:a7:0c:
04:bb:30:da:87:df:1f:4c:35:4d:79:9a:03:78:a8:8d:cf:97:
0a:af:15:2c:da:ba:2a:40:4f:cf:0f:7b:a4:b3:5d:27:18:d5:
7e:90:75:92:d4:b6:71:dc:12:a9:02:24:dc:2f:79:54:d7:b6:
61:8c:29:c9:2f:51:df:e2:63:81:08:7a:43:dc:df:7e:74:5e:
6e:6d:8e:62:24:44:56:fb:f1:a3:7f:9f:2c:4b:1b:c3:2e:cb:
1f:99:71:e0:43:a9:da:13:4d:e8:d7:87:a4:c3:d1:50:fe:40:
fa:c4:36:f4:e2:9b:3b:f1:eb:45:70:20:90:a0:f3:1e:b6:3c:
9d:83:0d:dc:47:7a:9b:07:30:ea:e4:cc:02:c0:ea:77:ca:cb:
10:7b:69:27:c8:d6:10:e4:c2:e4:46:ae:79:3a:74:75:f5:5b:
5a:10:b2:00:1b:92:35:52:ab:ab:7d:f8:5d:01:b5:6b:39:7d:
f0:f9:91:6c:0e:b3:2f:fe:a8:d4:b2:5a:0d:c2:54:7b:a4:df:
63:0e:c3:91:db:b8:95:6d:26:22:ac:35:3f:e1:6c:09:51:dc:
98:a1:1d:57:db:fd:92:3c:9f:fd:bd:95:73:43:4b:55:79:4a:
6a:7f:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:39:23 2025 by rpki-client